Extracted

• • Target
    Bank Swift Scan pdf.exe
  • Size 322KB
  • SHA256 7edea6fe44458e087954bd189d33214f74cdb0d25dc3ea598554a9b2e3808abc
  • MD5 0a6d9f4af51990a6a50bf65fe8404959
  • SHA1 37f8ff69c52fe6720e34b724938c558a2170a2ee
  • SHA512 ac1c3b4b0a111f96394a7415d53d7d982fd17253ef42ceac453a4556eb29c6ff89dd54dcd81913fbd1814237eb7595269b72cc9c70f8761b3d1b748d7b5720fa
  • MD5 SHA1 SHA512

  Score

  10^/10

  xloaderdi4cloaderrat

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader Payload

    rat

  • Deletes itself

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2